Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61ef2a33-ae5b-3cfc-8121-23afe27a101f.roa
File:                     61ef2a33-ae5b-3cfc-8121-23afe27a101f.roa (raw, json)
Hash identifier:          b0qwPA0LGuQEjgWFL2iCjnUf29RS+D5sssDLbQIMJ2w=
Subject key identifier:   35:78:C2:FC:2E:D6:95:0A:08:DA:7C:4E:2C:9D:E5:D4:A4:FE:0E:87
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76E984F01560FCCD0C0580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61ef2a33-ae5b-3cfc-8121-23afe27a101f.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        151.198.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:e9:84:f0:15:60:fc:cd:0c:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=4baa07b4-8ec4-47ac-9c3a-533cfbb3baa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:9f:01:e8:d7:dc:0c:aa:f8:e5:62:bf:3c:
                    70:45:5c:ad:c6:50:2e:32:e5:27:9e:ad:8f:ee:85:
                    1b:1f:2c:4b:ec:e7:3c:d1:49:84:13:a0:ed:a6:8a:
                    2f:02:96:0f:02:91:e5:64:f6:0b:ce:62:42:47:a0:
                    fb:41:11:f2:5c:ac:e5:52:ab:ba:ed:86:d9:4c:94:
                    92:6a:af:e7:5c:fd:0d:86:3a:f6:1b:31:fc:f9:bb:
                    3b:fe:35:9b:82:ee:56:53:4a:a5:6b:17:e7:85:44:
                    e2:34:d8:d0:94:d7:8b:25:b0:8e:fb:95:40:01:27:
                    95:7c:d4:b2:f8:3e:19:25:48:b4:ac:fe:a4:cf:24:
                    b7:b4:34:18:7f:d9:47:94:0d:87:72:36:1d:f7:aa:
                    ed:e4:cb:ff:e1:af:6f:42:bc:98:4a:b8:a6:14:e6:
                    3c:ae:5e:e2:d5:c4:32:02:ef:a1:9e:16:83:68:e1:
                    0a:b1:c9:de:fb:b1:04:b2:33:27:eb:1a:94:ed:72:
                    3b:90:3f:3e:0f:9d:66:21:7a:62:45:69:26:82:1a:
                    fe:a3:5c:8b:1c:a9:11:a2:2d:fa:b5:d6:8f:53:55:
                    f3:c3:16:c7:18:08:0c:45:22:ca:01:4e:5b:86:4f:
                    57:df:57:a5:81:87:8b:13:77:c9:36:bd:fe:fb:a9:
                    9e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:78:C2:FC:2E:D6:95:0A:08:DA:7C:4E:2C:9D:E5:D4:A4:FE:0E:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61ef2a33-ae5b-3cfc-8121-23afe27a101f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.198.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:7d:cd:98:8e:42:e5:2d:aa:25:7c:d0:d4:ab:87:87:a2:67:
         db:90:91:e4:57:af:33:c4:ca:70:d6:25:2f:cf:e4:18:7d:42:
         83:4f:25:a9:2f:c9:c6:fd:cc:c0:d6:42:e0:e3:c2:94:4e:b9:
         2c:7b:e1:36:e7:0a:41:f1:0b:6e:17:0f:5c:11:eb:00:4e:92:
         c1:bf:28:f6:6c:3a:45:de:b4:bb:8e:af:9d:8b:b5:02:f5:6c:
         64:66:11:82:6c:aa:cf:47:1c:3b:b6:c5:89:99:ab:75:ee:37:
         4b:46:2b:13:cf:9c:50:7a:e3:c7:c2:e0:44:b2:d1:62:74:b1:
         a9:d8:d6:19:df:77:46:db:43:68:99:ed:7f:69:e8:3c:e8:11:
         c5:c1:aa:d3:3c:98:63:58:a7:88:ab:fe:34:34:bf:e0:d2:ef:
         92:41:e1:21:71:13:de:22:1e:fb:5f:9e:d4:40:bf:3e:08:3f:
         3b:8b:5e:3b:b7:1c:c3:be:47:e5:41:72:9a:1e:dc:27:38:be:
         f9:23:22:0b:33:6c:a4:77:80:8d:4f:bf:9c:8e:45:93:b5:5e:
         a2:5f:f5:c7:d9:a7:58:dc:54:cf:53:d6:8f:e8:5b:67:cb:76:
         56:f1:a1:ef:e7:a8:a8:c4:3f:6a:e9:4c:26:6a:22:70:51:ce:
         bb:02:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:29 2024 by rpki-client on console-ams.rpki-client.org